Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_UTqcFB2lKn3EJjZnKameG9Vls.roa
File: b_UTqcFB2lKn3EJjZnKameG9Vls.roa (raw, json)
Hash identifier: 4clhbf4KZfkv5F38rPpE8eLp/sXDiSbnKiFwAk7J+lU=
Subject key identifier: 6F:F5:13:A9:C1:41:DA:52:A7:DC:42:63:66:72:9A:99:E1:BD:56:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70511A06
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_UTqcFB2lKn3EJjZnKameG9Vls.roa
Signing time: Sun 06 Mar 2022 22:10:33 +0000
ROA not before: Sun 06 Mar 2022 22:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1884363270 (0x70511a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 22:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ff513a9c141da52a7dc426366729a99e1bd565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:5c:e7:49:d5:cd:b0:b2:3c:3d:6a:9e:45:
27:d5:c2:56:69:c1:c4:31:b9:b5:4a:06:cf:b0:fc:
ab:57:e1:11:10:c5:54:03:eb:54:e1:6a:f3:e6:5d:
e8:be:61:5a:39:7f:61:fa:56:c5:b8:02:eb:7b:22:
37:87:6e:81:1a:3a:cf:4d:47:a0:71:2f:9a:4f:d6:
ca:6b:14:02:13:46:6e:2f:9d:73:5c:32:e7:88:72:
61:9c:39:e4:cd:2a:47:8e:e8:c5:f4:3b:d7:f2:10:
25:92:4c:40:0e:66:2e:91:a5:1f:4e:1b:c6:13:8a:
9a:ae:58:b1:c7:5e:ac:dc:20:9f:94:a1:b1:90:22:
05:fb:e4:3f:e2:0b:e3:34:f0:6d:f5:20:0b:46:e0:
2d:f0:06:73:51:27:2d:69:81:49:6d:f4:49:a4:a0:
bd:7a:b6:e1:9a:4c:81:c2:91:e1:07:e7:92:1e:a4:
f0:be:e1:7c:70:ca:00:cb:c8:2f:03:0f:e9:28:9b:
e7:90:1d:ea:fc:bb:9e:6c:1d:6c:95:f6:69:6b:53:
79:93:02:f6:d8:67:d5:32:29:7d:ca:28:a8:37:0d:
c8:39:df:7e:bd:8f:e8:28:e5:fc:a2:c3:8a:72:64:
4a:0b:bf:6e:f1:de:b5:70:9f:0c:2a:b0:d7:44:37:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:13:A9:C1:41:DA:52:A7:DC:42:63:66:72:9A:99:E1:BD:56:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_UTqcFB2lKn3EJjZnKameG9Vls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:a1:67:99:68:6c:75:18:f6:bb:12:a2:68:17:c4:20:7f:73:
32:df:01:fa:fe:0e:6e:55:b0:88:de:61:c7:dd:07:9a:8c:5c:
63:2a:c9:a8:80:50:36:74:76:17:de:d6:85:6d:22:e2:b0:71:
26:78:bc:bd:66:e9:7b:2b:ff:79:1c:1f:05:80:e5:ea:24:a1:
7c:e6:0d:40:86:45:09:e3:6f:85:3c:64:42:1f:be:68:a0:33:
a4:00:7e:21:15:b3:dc:aa:53:82:41:49:8d:2f:d7:b6:52:ae:
e1:a4:fe:ca:4e:9c:a7:02:ea:88:76:3c:01:c7:94:9c:3f:89:
75:48:e0:13:c3:e3:f3:c3:4a:99:73:fa:52:ef:4e:42:9b:4c:
d8:ec:32:b7:05:69:18:61:1d:0e:45:e8:81:d3:4e:79:5a:3b:
97:14:b2:66:22:fd:c8:3c:4c:38:f0:76:94:00:38:76:a6:50:
1e:e7:c3:17:b6:9b:50:39:33:0e:60:6a:99:bf:fa:50:0b:d1:
e9:85:05:53:94:84:f5:78:c0:ef:00:06:4e:0c:ca:b9:a7:28:
85:43:c9:ac:71:d5:61:e5:54:2e:35:55:d5:67:d5:f4:e5:98:
7d:1d:56:c0:ae:9b:d5:98:e9:4c:f3:3b:08:e8:25:c0:c0:65:
35:2d:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:30 2025 by rpki-client